curl vulnerabilities (Debian)
224 vulnerabilities.
curlDebiancURL and libcurl before 7.38.0 does not properly handle IP addresses in cookie domain names,...5.0 MediumcurlDebianThe default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both...5.0 MediumcurlDebiancURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections...5.0 MediumcurlDebiancURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows...5.0 MediumcurlDebiancURL and libcurl 7.1 before 7.36.0, when using the OpenSSL, axtls, qsossl or gskit libraries for...5.8 MediumcurlDebianThe default configuration in cURL and libcurl 7.10.6 before 7.36.0 re-uses (1) SCP, (2) SFTP, (3)...6.4 MediumcurlDebiancURL and libcurl 7.10.6 through 7.34.0, when more than one authentication method is enabled, re...4.0 MediumcurlDebianThe GnuTLS backend in libcurl 7.21.4 through 7.33.0, when disabling digital signature...4.0 MediumcurlDebiancURL and libcurl 7.18.0 through 7.32.0, when built with OpenSSL, disables the certificate CN and...4.3 MediumcurlDebianHeap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl...6.8 MediumcurlDebianThe tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the...5.0 MediumcurlDebianStack-based buffer overflow in the Curl_sasl_create_digest_md5_message function in lib/curl_sasl...7.5 HighcurlDebiancurl and libcurl 7.2x before 7.24.0 do not properly consider special characters during extraction...7.5 HighcurlDebianThe SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet...4.3 MediumcurlDebianThe Curl_input_negotiate function in http_negotiate.c in libcurl 7.10.6 through 7.21.6, as used...4.3 MediumcurlDebiancontent_encoding.c in libcurl 7.10.5 through 7.19.7, when zlib is enabled, does not properly...6.8 MediumcurlDebianlib/ssluse.c in cURL and libcurl 7.4 through 7.19.5, when OpenSSL is used, does not properly...7.5 HighcurlDebianThe redirect implementation in curl and libcurl 5.11 through 7.19.3, when CURLOPT_FOLLOWLOCATION...6.8 MediumcurlDebianlibcurl 7.14.0 through 7.16.3, when built with GnuTLS support, does not check SSL/TLS certificate...7.5 HighcurlDebianHeap-based buffer overflow in cURL and libcURL 7.15.0 through 7.15.2 allows remote attackers to...7.5 HighcurlDebianMultiple off-by-one errors in the cURL library (libcurl) 7.11.2 through 7.15.0 allow local users...4.6 MediumcurlDebianStack-based buffer overflow in the ntlm_output function in http-ntlm.c for (1) wget 1.10, (2)...7.5 HighcurlDebianMultiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other versions,...8.8 HighcurlDebiancurl 7.x before 7.10.7 sends CONNECT proxy credentials to the remote server.7.5 High